src: suit to principle of least privilege